[IntelMQ-dev] RFC: scan_msrpc report

[Sebix]

Good morning

On 12/2/24 8:36 PM, elsif wrote:
> [
>             "extra.",
>             "version",
>             "validate_to_none"
>          ], 

What "version" is this?

The version of the event specification?
The version of the feed?
The server version of RPC?
The RPC protocol version?

If I'd read just "extra.version" in the event data either as data 
receiver or operator, I'd have no idea what version is meant here.

best regards
Sebastian

-- 
Institute for Common Good Technology
gemeinnütziger Kulturverein - nonprofit cultural society
https://commongoodtechnology.org/
ZVR 1510673578